$ rpki-client -vvf rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft File: gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft (raw, json) Hash identifier: dTrkN8wtQEF81GE/vebLEqtTSIcAeuNZxCrf9bYFhBI= Subject key identifier: 51:19:A4:8C:A7:94:F9:84:20:52:8F:22:08:16:10:00:15:D1:0C:2F Authority key identifier: 80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64 Certificate issuer: /CN=A9111318/serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64 Certificate serial: 3569 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft Manifest number: 34D4 Signing time: Mon 12 May 2025 14:42:18 +0000 Manifest this update: Mon 12 May 2025 14:42:18 +0000 Manifest next update: Mon 19 May 2025 14:42:18 +0000 Files and hashes: 1: gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl (hash: A/VSI70dw2x4IXERUsl9I7ceZnmYhTvPkUODuHcyOxk=) 2: 24108E38125C11EFA53AA21EC4F9AE02.roa (hash: jjJ8qPnS0/nICN56yp6qO0H5skT5XCL/0DlZKxMJ70k=) 3: A98C92A0340411E9A22CD05CC4F9AE02.roa (hash: hsYOwOWg5RWqGecDOMbtdo5wShwG/Gl7BoVP0vZ6bGc=) 4: 26CCB614E0D011E9B0E8C36FC4F9AE02.roa (hash: kMC2WeYC4MWKHd2Kh8Eq/aNV3X4hXQ+t8sr83adHojY=) 5: 7E04A27C33F911E98674843BC4F9AE02.roa (hash: wLtvBH1ixy3w8HEFDYVnVxsE51AunrDxg1Sv+UfH0y8=) 6: AACC7DA6340411E9A22CD05CC4F9AE02.roa (hash: ZJ7mBIfK6kg44ULz9lZ+nGdvGWEwkZ1i6idGhEH1ny8=) 7: 29F5CB12FB5411ED914D5C39C4F9AE02.roa (hash: kLMHUaXxDc9JSr3uCUVN9uok6cTqtVMvyzIAoodsl5w=) 8: A8ED77E2340411E9A22CD05CC4F9AE02.roa (hash: 7IUX8R8tCZTwRimEawOsuuQRkKntzFGSWJJzMjhRIhw=) 9: 7D883CF033F911E98674843BC4F9AE02.roa (hash: t2VqhrZAW3k4gdKbAI0o6ca/tb/0ybdt22kYPc3tp54=) 10: AA2A006C340411E9A22CD05CC4F9AE02.roa (hash: nKUEIfIPimBIzQtFV8VjV5K70GmMdKase3l7FgyeD2c=) 11: A8689054340411E9A22CD05CC4F9AE02.roa (hash: itcw/LzViA9/AL4k7aRJEFd+ng6R/f3GHawU3mFJnvU=) 12: 9F5180204DE611ED852CCB87C4F9AE02.roa (hash: FXKeIuPsz0cxq/rV/xoooCu4bWy/R4+M5W25tXkYyCs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 14:42:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13673 (0x3569) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111318, serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64 Validity Not Before: May 12 14:42:18 2025 GMT Not After : May 19 14:42:18 2025 GMT Subject: CN=682208ca-6d55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:01:99:43:ce:fe:9e:0f:98:56:7d:38:41:d8: 80:26:a3:b2:a6:71:d2:0e:32:d6:c9:e2:ca:01:4d: 83:e3:a2:33:9a:58:b0:35:44:09:c9:49:b0:d3:c7: b0:28:b8:dc:2a:88:02:55:67:2e:00:79:d5:6d:90: e4:29:82:d9:db:d3:99:0f:b5:73:06:b9:02:d4:c9: a8:31:c4:e7:ee:b7:a9:42:ac:51:6a:b6:e3:4b:d2: 12:10:d0:61:07:af:88:f1:f7:25:19:74:b9:1f:53: 15:a7:38:d7:27:28:08:84:8a:2e:98:4e:2d:44:8b: 33:0f:ec:57:1e:48:84:49:fd:33:d5:00:34:d6:5f: 61:94:1c:19:ca:48:df:43:d5:90:55:c6:b8:14:2b: 17:7a:40:79:05:0b:2e:f5:42:1d:d2:cd:b9:2f:02: 61:74:96:bb:c2:5d:52:cb:9b:20:75:53:12:07:ad: bc:de:72:62:ae:7e:6f:78:2a:00:a0:d3:b1:4c:bb: 17:4e:73:1f:83:b2:8a:45:c0:29:1b:82:4a:a1:82: 27:eb:c1:50:fb:31:c4:89:75:c2:2b:39:a1:e2:d5: 35:4c:3f:5d:40:88:e6:8f:19:b5:b5:76:bd:43:4a: 55:ca:c6:90:3a:0b:82:e6:66:0a:b6:9f:0b:c7:92: 65:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:19:A4:8C:A7:94:F9:84:20:52:8F:22:08:16:10:00:15:D1:0C:2F X509v3 Authority Key Identifier: keyid:80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:32:20:1d:f6:4e:58:56:2c:aa:c5:0d:83:fa:85:7a:af:34: a9:b4:c6:12:75:2e:47:4f:50:82:f0:19:0d:eb:30:84:f9:12: 9b:7c:2b:35:ee:a2:67:d4:ee:30:fe:87:5f:28:5f:fe:4a:f1: 44:db:f9:ad:b4:57:8e:ce:30:76:89:21:aa:44:a1:32:8c:0b: e4:f8:a6:3b:c2:ae:dd:9e:db:8a:ec:e2:38:ff:c1:ee:17:88: 8b:f4:73:d7:3b:1b:e2:0e:00:6b:0f:02:67:2b:3c:d1:fa:50: 76:3c:dd:f9:c0:c7:8b:39:78:2c:37:ea:a9:eb:0f:36:c8:16: 4b:23:4a:86:2e:0c:59:5d:2f:99:09:04:f8:20:fc:85:80:ed: c7:69:30:f6:8a:ed:c4:c6:31:b5:fc:41:6a:b2:ef:e2:76:6c: a5:65:3b:dc:ad:ca:65:d1:41:6e:6b:3d:f5:23:f5:f0:6e:b6: 2c:c0:4a:27:8c:91:e6:56:d9:20:8b:ea:25:54:ed:cf:6a:ed: e1:9e:d7:cb:36:33:c6:c7:c8:25:8b:db:8f:ae:09:e0:46:83: 96:a7:3c:64:66:bb:5d:62:a0:85:06:68:8a:a3:04:b5:45:46: e2:01:94:a2:81:64:48:4b:4c:4d:70:f1:af:25:09:47:97:d8: df:82:a4:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEzMTgxMTAvBgNVBAUTKDgwNkFCRkY0NjM1OTRDQUEzMERFNzBBMzExQUUyRjg0 OTE4OUJDNjQwHhcNMjUwNTEyMTQ0MjE4WhcNMjUwNTE5MTQ0MjE4WjAYMRYwFAYD VQQDEw02ODIyMDhjYS02ZDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0QGZQ87+ng+YVn04QdiAJqOypnHSDjLWyeLKAU2D46IzmliwNUQJyUmw08ew KLjcKogCVWcuAHnVbZDkKYLZ29OZD7VzBrkC1MmoMcTn7repQqxRarbjS9ISENBh B6+I8fclGXS5H1MVpzjXJygIhIoumE4tRIszD+xXHkiESf0z1QA01l9hlBwZykjf Q9WQVca4FCsXekB5BQsu9UId0s25LwJhdJa7wl1Sy5sgdVMSB6283nJirn5veCoA oNOxTLsXTnMfg7KKRcApG4JKoYIn68FQ+zHEiXXCKzmh4tU1TD9dQIjmjxm1tXa9 Q0pVysaQOguC5mYKtp8Lx5JlIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFEZpIyn lPmEIFKPIggWEAAV0QwvMB8GA1UdIwQYMBaAFIBqv/RjWUyqMN5woxGuL4SRibxk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTMxOC9EQzc0NTFGMjFE OTExMUUyOThFNzQ2RjQwOEIwMkNEMi9nR3FfOUdOWlRLb3czbkNqRWE0dmhKR0p2 R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dHcV85R05aVEtvdzNuQ2pFYTR2aEpHSnZHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTMxOC9EQzc0NTFGMjFEOTExMUUyOThFNzQ2RjQwOEIwMkNEMi9nR3FfOUdOWlRL b3czbkNqRWE0dmhKR0p2R1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKMiAd9k5YViyqxQ2D+oV6rzSptMYSdS5HT1CC8BkN6zCE+RKbfCs1 7qJn1O4w/odfKF/+SvFE2/mttFeOzjB2iSGqRKEyjAvk+KY7wq7dntuK7OI4/8Hu F4iL9HPXOxviDgBrDwJnKzzR+lB2PN35wMeLOXgsN+qp6w82yBZLI0qGLgxZXS+Z CQT4IPyFgO3HaTD2iu3ExjG1/EFqsu/idmylZTvcrcpl0UFuaz31I/XwbrYswEon jJHmVtkgi+olVO3Pau3hntfLNjPGx8gli9uPrgngRoOWpzxkZrtdYqCFBmiKowS1 RUbiAZSigWRIS0xNcPGvJQlHl9jfgqT5 -----END CERTIFICATE-----Generated at Tue May 13 22:48:40 2025 by rpki-client